Static task
static1
Behavioral task
behavioral1
Sample
aff28ed4307b0627b9b89c36b858c5febe3ccdf16aa54c3c5cd45b1359af4925.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aff28ed4307b0627b9b89c36b858c5febe3ccdf16aa54c3c5cd45b1359af4925.exe
Resource
win10v2004-20220901-en
General
-
Target
aff28ed4307b0627b9b89c36b858c5febe3ccdf16aa54c3c5cd45b1359af4925
-
Size
749KB
-
MD5
1a82c9b852881be8420b4a90ba0cfb96
-
SHA1
979f3328c24756c3d1837114ab223e12fb338f25
-
SHA256
aff28ed4307b0627b9b89c36b858c5febe3ccdf16aa54c3c5cd45b1359af4925
-
SHA512
014f6daab854ebdb7c726abbbdbaa913590362b7c87c4cfbe86b6e07be41a384f813698775763555ce93e5d4a0a916da4b4a5cf582f0f56651a56d49f2e32555
-
SSDEEP
12288:zY0tE0F6RGnuCFRsWuiK66wROIhelczaF01FIM/iM8R2jrFnG0g11wpUw1+2crP8:Uw8/+vn6M9hKczaWHxjrFrpUwkR6v
Malware Config
Signatures
Files
-
aff28ed4307b0627b9b89c36b858c5febe3ccdf16aa54c3c5cd45b1359af4925.exe windows x86
d8667f67a706042a781f828ef459bdb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
GetCommandLineA
CreateDirectoryA
FindClose
GetDriveTypeW
CreatePipe
ExitThread
RemoveDirectoryA
CreateSemaphoreW
GetModuleHandleA
FindAtomA
ResumeThread
SetStdHandle
WriteFile
VirtualProtectEx
HeapFree
RemoveDirectoryA
GetVersion
GetSystemTime
WriteConsoleA
SetEvent
SetVolumeLabelA
FindClose
ResetEvent
GetFileType
uxtheme
DrawThemeBackground
GetThemeTextExtent
CloseThemeData
GetThemeColor
OpenThemeData
SetWindowTheme
DrawThemeEdge
GetThemeBool
CloseThemeData
GetThemeSysSize
GetWindowTheme
IsThemeActive
GetThemeTextMetrics
pstorsvc
Start
Start
Start
Start
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ